How MSSPs Turn Security Alerts Into Exponential Revenue With Morpheus AI
托管安全服务提供商市场整合加剧,预计到2028年前200家将减少至120家。Morpehus AI通过自动化处理安全警报和优化运营流程,帮助提供商降低成本并提升服务质量。其功能包括统一数据模型、智能分析和高效响应机制,推动业务从线性增长转向指数收益。
Aggregator
DragonForce
3 months ago
You must login to view this content
cohenido
German ISP Aurologic GmbH has Become a Central Nexus for Hosting Malicious Infrastructure
3 months ago
German hosting provider aurologic GmbH has emerged as a central facilitator within the global malicious infrastructure ecosystem, providing upstream transit and data center services to numerous high-risk hosting networks. Operating from its primary facility at Tornado Datacenter GmbH & Co. KG in Langen, Germany, aurologic markets itself as a high-capacity European carrier offering dedicated server […]
The post German ISP Aurologic GmbH has Become a Central Nexus for Hosting Malicious Infrastructure appeared first on Cyber Security News.
Tushar Subhra Dutta
光棍节开放注册微信抽奖活动，再送40个账号注册码或300论坛币，周一下午两点开奖，详见：【开放注册公告】吾爱破解论坛2025年11月11日光棍节开放注册公告。
3 months ago
倒计时1天 | 1+1的无限可能，1起奔赴新未来
3 months ago
11月9日，相约北京。
日经新闻在线平台遭入侵，瑞典IT供应商客户数据泄露|一周特辑
3 months ago
点击查看更多本周网络安全大事件。
CVE-2012-10063 | Nagios XI up to 2012R1.2 Legacy Core Configuration Manager sql injection
3 months 1 week ago
A vulnerability was found in Nagios XI up to 2012R1.2. It has been rated as critical. The impacted element is an unknown function of the component Legacy Core Configuration Manager. Performing manipulation results in sql injection.
This vulnerability is known as CVE-2012-10063. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is advised.
vuldb.com
CVE-2020-36859 | Nagios XI up to 5.7.3 Object Edit Page sql injection
3 months 1 week ago
A vulnerability labeled as critical has been found in Nagios XI up to 5.7.3. Affected is an unknown function of the component Object Edit Page. The manipulation results in sql injection.
This vulnerability was named CVE-2020-36859. The attack may be performed from remote. There is no available exploit.
The affected component should be upgraded.
vuldb.com
CVE-2021-47689 | Nagios XI up to 5.7.x Core Config Manager cross site scripting
3 months 1 week ago
A vulnerability described as problematic has been identified in Nagios XI up to 5.7.x. The impacted element is an unknown function of the component Core Config Manager. The manipulation results in cross site scripting.
This vulnerability was named CVE-2021-47689. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
vuldb.com
CVE-2011-10040 | Nagios XI up to 2011R1.8 Link cross site scripting
3 months 1 week ago
A vulnerability has been found in Nagios XI up to 2011R1.8 and classified as problematic. Affected by this issue is some unknown functionality of the component Link Handler. The manipulation leads to cross site scripting.
This vulnerability is listed as CVE-2011-10040. The attack may be initiated remotely. There is no available exploit.
The affected component should be upgraded.
vuldb.com
CVE-2020-36866 | Nagios XI up to 5.7.1 Manage Users Page cross site scripting
3 months 1 week ago
A vulnerability described as problematic has been identified in Nagios XI up to 5.7.1. This affects an unknown part of the component Manage Users Page. Executing manipulation can lead to cross site scripting.
This vulnerability is handled as CVE-2020-36866. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.
vuldb.com
CVE-2020-36860 | Nagios XI up to 5.7.3 Object Edit Page cross site scripting
3 months 1 week ago
A vulnerability marked as problematic has been reported in Nagios XI up to 5.7.3. This issue affects some unknown processing of the component Object Edit Page. The manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2020-36860. It is possible to initiate the attack remotely. There is no exploit available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2020-36861 | Nagios XI up to 5.7.4 Check Period Page cross site scripting
3 months 1 week ago
A vulnerability described as problematic has been identified in Nagios XI up to 5.7.4. Impacted is an unknown function of the component Check Period Page. The manipulation results in cross site scripting.
This vulnerability is known as CVE-2020-36861. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is recommended.
vuldb.com
CVE-2018-25119 | Nagios Fusion up to 4.1.4 fusionwindow cross site scripting
3 months 1 week ago
A vulnerability classified as problematic was found in Nagios Fusion up to 4.1.4. The impacted element is an unknown function. Such manipulation of the argument fusionwindow leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2018-25119. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is advised.
vuldb.com
CVE-2017-20209 | Nagios Fusion up to 4.0.0 Users/Servers Page cross site scripting
3 months 1 week ago
A vulnerability identified as problematic has been detected in Nagios Fusion up to 4.0.0. Impacted is an unknown function of the component Users/Servers Page. The manipulation leads to cross site scripting.
This vulnerability is documented as CVE-2017-20209. The attack can be initiated remotely. There is not any exploit available.
You should upgrade the affected component.
vuldb.com
ISMG Editors: Lawsuits Follow Year's Top Health Data Breach
3 months 1 week ago
Conduent Gets Sued; US Government's Cyber Shutdown Woes; Hacktivist Hits Rise
The latest ISMG Editors' Panel tackles: post-hack legal fallout for Conduent after it suffered the year's biggest health data breach, the U.S. government's shutdown complicating its response to the breach of vendor F5 and the rise in attacks targeting Western critical national infrastructure.
The latest ISMG Editors' Panel tackles: post-hack legal fallout for Conduent after it suffered the year's biggest health data breach, the U.S. government's shutdown complicating its response to the breach of vendor F5 and the rise in attacks targeting Western critical national infrastructure.
CBO Hit by Suspected Nation-State Cyberattack
3 months 1 week ago
Nation-State Actor Suspected in Breach of Congressional Budget Office
The Congressional Budget Office has been the subject of an apparent cyber incident, officials confirmed Friday, raising concerns that adversaries may have gained access to sensitive data used to inform U.S. legislative decisions amid ongoing federal cyber staffing shortages.
The Congressional Budget Office has been the subject of an apparent cyber incident, officials confirmed Friday, raising concerns that adversaries may have gained access to sensitive data used to inform U.S. legislative decisions amid ongoing federal cyber staffing shortages.
For OT Cyber Defenders, Lack of Data Is the Biggest Threat
3 months 1 week ago
OT Security 'a Generation Behind Traditional IT'
For those charged with the cyber defense of OT and industrial control systems, one challenge towers above all others: Data. Specifically, its scarcity. Most operators simply don't capture it, in stark contrast with their IT counterparts.
For those charged with the cyber defense of OT and industrial control systems, one challenge towers above all others: Data. Specifically, its scarcity. Most operators simply don't capture it, in stark contrast with their IT counterparts.
Bill Seeks HIPAA-Like Protections for Consumer Health Data
3 months 1 week ago
Senate HELP Committee Chair Seeks to Secure Data in Smart Watches, Health Apps
Sen. Bill Cassidy, R-La., a physician and chair of the Senate health committee, has proposed legislation that aims to create parallel HIPAA-like privacy protections to more types of health data - such as data collected by consumer wearable devices and health apps - not currently covered under HIPAA.
Sen. Bill Cassidy, R-La., a physician and chair of the Senate health committee, has proposed legislation that aims to create parallel HIPAA-like privacy protections to more types of health data - such as data collected by consumer wearable devices and health apps - not currently covered under HIPAA.
CVE-2025-12476 | Azure Access BLU-IC2/BLU-IC4 up to 1.19.5 missing authentication
3 months 1 week ago
A vulnerability has been found in Azure Access BLU-IC2 and BLU-IC4 up to 1.19.5 and classified as critical. Impacted is an unknown function. This manipulation causes missing authentication.
This vulnerability is registered as CVE-2025-12476. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com